Bump bandit from 1.9.3 to 1.9.4

[dependabot]

Bumps bandit from 1.9.3 to 1.9.4.

Release notes

Sourced from bandit's releases.

1.9.4

What's Changed

• chore: fixed some typos in comments by @​jakob1379 in PyCQA/bandit#1351
• Bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in PyCQA/bandit#1353
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @​dependabot[bot] in PyCQA/bandit#1357
• Fix B613 crash when reading from stdin by @​worksbyfriday in PyCQA/bandit#1361
• Include filename in nosec 'no failed test' warning by @​worksbyfriday in PyCQA/bandit#1363
• Fix B615 false positive when revision is set via variable by @​worksbyfriday in PyCQA/bandit#1358
• Lower version guard in check_ast_node to Python 3.12 by @​rcgray in PyCQA/bandit#1355
• Fix B106 reporting wrong line number on multiline function calls by @​worksbyfriday in PyCQA/bandit#1360

New Contributors

• @​jakob1379 made their first contribution in PyCQA/bandit#1351
• @​worksbyfriday made their first contribution in PyCQA/bandit#1361
• @​rcgray made their first contribution in PyCQA/bandit#1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

Commits

• 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
• c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
• 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
• e27493f Include filename in nosec 'no failed test' warning (#1363)
• b69b336 Fix B613 crash when reading from stdin (#1361)
• e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
• ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
• c0def6c chore: fixed some typos in comments (#1351)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

This is a minimal dependency bump PR — bumping bandit from 1.9.3 to 1.9.4 for Python > 3.11.

---

Code Quality

• ✅ No style guide violations — single line change in pyproject.toml
• ✅ No commented-out code
• ✅ N/A — no variable names changed
• ✅ N/A — no logic changes
• ✅ No defects, bugs, or security vulnerabilities introduced
• ✅ CLAUDE.md is not modified and is appropriate for general use

Testing

• ✅ No new code requires tests — this is a dependency version bump only

Documentation

• ✅ README update not required for a patch dependency bump
• ✅ No API changes
• ✅ No complex logic requiring inline comments
• ❌ CHANGELOG.md — No changelog entry. Consider documenting dependency updates, especially security-related tool bumps like bandit.
• ✅ No Markdown files modified

Security

• ✅ No hardcoded credentials
• ✅ No input validation concerns
• ✅ No error handling concerns
• ✅ No sensitive data in logs
• ✅ No license files (.lic) checked in

---

Summary

Approved with minor note. The change is correct and safe — bandit 1.9.4 is a patch release. The only suggestion is to add a CHANGELOG.md entry if the project tracks dependency updates there.

Automated code review analyzing defects and coding standards